This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/SoVU9F3W3Bai3qKtYef_WnEk3Mc.roa File: SoVU9F3W3Bai3qKtYef_WnEk3Mc.roa (raw, json) Hash identifier: qPqyEDMPhVctrtsifGL512rIc3cU9LPj65aKHgKyOGw= Subject key identifier: 4A:85:54:F4:5D:D6:DC:16:A2:DE:A2:AD:61:E7:FF:5A:71:24:DC:C7 Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7 Certificate serial: 019B7EA62FBE678B1BB28A16C968BA49C556 Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/SoVU9F3W3Bai3qKtYef_WnEk3Mc.roa Signing time: Fri 02 Jan 2026 12:19:39 +0000 ROA not before: Fri 02 Jan 2026 12:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208759 IP address blocks: 45.85.236.0/24 maxlen: 24 45.85.237.0/24 maxlen: 24 45.85.238.0/24 maxlen: 24 45.85.239.0/24 maxlen: 24 2a0e:c884:3e80::/44 maxlen: 48 2a0e:c885::/44 maxlen: 44 2a0e:c886::/44 maxlen: 44 2a0e:c887::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:2f:be:67:8b:1b:b2:8a:16:c9:68:ba:49:c5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7 Validity Not Before: Jan 2 12:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a8554f45dd6dc16a2dea2ad61e7ff5a7124dcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:9a:f9:ab:38:b0:32:79:d0:69:3d:9a:76: 71:1d:05:34:a4:40:54:4f:22:42:12:62:d6:6c:63: 4c:ce:3c:bb:73:ee:72:18:45:c4:69:38:f0:0b:b9: 0d:6f:9a:6a:1c:66:2c:af:97:d3:40:e1:b1:c6:60: b0:1d:2d:3b:05:bc:8d:08:4d:98:c0:21:d0:65:62: c0:24:2a:49:76:14:2f:61:2e:04:a4:88:0f:2a:04: 64:17:7f:7b:60:15:c9:f7:4f:69:41:37:a1:e6:78: e2:ba:10:ea:68:bf:46:24:a2:65:59:81:28:9d:e1: 92:1f:75:f4:00:ed:06:0c:95:75:9d:81:ca:5a:e2: a3:6e:25:95:79:4c:2e:6d:4c:06:3f:ba:4b:00:82: af:f1:44:36:c3:cd:84:30:5d:fe:bb:8f:e7:40:ad: 5d:f2:bd:f3:a3:a6:00:34:a7:64:59:77:75:ff:d7: 45:93:aa:0e:aa:8b:57:59:cc:8c:83:ec:2d:12:90: 15:39:6d:48:8c:49:bd:26:c3:a0:9b:b7:d1:f7:4f: 83:ff:2e:0a:6c:b2:82:0f:6f:73:06:1f:7f:6a:3c: 48:2c:ed:10:2b:1c:70:22:4b:2e:ee:a5:1e:d9:1e: f1:8d:75:67:67:49:11:e4:05:83:5c:e5:df:94:c0: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:85:54:F4:5D:D6:DC:16:A2:DE:A2:AD:61:E7:FF:5A:71:24:DC:C7 X509v3 Authority Key Identifier: keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/SoVU9F3W3Bai3qKtYef_WnEk3Mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.236.0/22 IPv6: 2a0e:c884:3e80::/44 2a0e:c885::/44 2a0e:c886::/44 2a0e:c887::/44 Signature Algorithm: sha256WithRSAEncryption 66:74:a6:61:a3:38:1f:dc:8b:15:9f:8a:02:db:2b:2b:8d:c6: 4a:10:2c:87:a7:45:ee:f9:50:85:10:cd:57:fa:b2:28:f0:27: f2:fc:af:81:b5:d1:0e:db:31:b4:a5:95:1f:7d:81:03:25:6b: d4:c3:2f:33:03:f6:30:ba:dd:02:fb:f7:44:62:cc:e5:df:e8: 87:69:76:54:75:80:8a:27:88:63:fa:3a:42:ed:0b:8e:59:80: 64:39:09:b8:73:ef:da:d1:6c:5e:62:12:4c:74:b6:ed:4a:02: d5:b3:e7:3a:4f:0e:14:dc:b7:47:a9:25:2a:ff:dd:a5:75:19: b2:f9:44:04:77:3b:1f:4f:88:b4:74:4c:35:00:15:df:88:72: 76:96:14:ae:78:c9:54:b3:90:a0:91:28:dd:3f:b2:66:14:70: e2:59:6b:77:77:28:eb:64:43:35:b9:17:83:22:9d:8b:2d:aa: ee:99:0d:9a:15:10:bb:84:ac:1e:d0:42:50:c3:a1:05:5e:18: bd:68:6e:4b:69:e8:29:59:b9:6a:a5:ff:b8:4a:6b:6b:8b:b5: 39:ce:8d:0f:a4:9c:5c:09:65:69:f5:87:25:1b:95:25:3a:7f: 96:33:4a:46:03:66:51:b7:8c:aa:71:8d:72:2f:57:de:67:8e: e2:f8:b0:65 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt+pi++Z4sbsooWyWi6ScVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YzkxZjFjYjA4NzQyMzJhMDRmYmMwOTJiYWE2ODhhY2Nl Y2M5ZDcwHhcNMjYwMTAyMTIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTg1NTRmNDVkZDZkYzE2YTJkZWEyYWQ2MWU3ZmY1YTcxMjRkY2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXWa+as4sDJ50Gk9mnZxHQU0pEBU TyJCEmLWbGNMzjy7c+5yGEXEaTjwC7kNb5pqHGYsr5fTQOGxxmCwHS07BbyNCE2Y wCHQZWLAJCpJdhQvYS4EpIgPKgRkF397YBXJ909pQTeh5njiuhDqaL9GJKJlWYEo neGSH3X0AO0GDJV1nYHKWuKjbiWVeUwubUwGP7pLAIKv8UQ2w82EMF3+u4/nQK1d 8r3zo6YANKdkWXd1/9dFk6oOqotXWcyMg+wtEpAVOW1IjEm9JsOgm7fR90+D/y4K bLKCD29zBh9/ajxILO0QKxxwIksu7qUe2R7xjXVnZ0kR5AWDXOXflMCvFwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFEqFVPRd1twWot6irWHn/1pxJNzHMB8GA1UdIwQY MBaAFBnJHxywh0IyoE+8CSuqaIrM7MnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NrZkhMQ0hRaktnVDd3Sks2cG9pc3pzeWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wNDYzMzctNGYxZi00NDRlLTgzZDct MDU0ZDY1ZDcyNDdmLzEvU29WVTlGM1czQmFpM3FLdFllZl9XbkVrM01jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8wNDYzMzctNGYxZi00NDRlLTgzZDctMDU0ZDY1ZDcyNDdm LzEvR2NrZkhMQ0hRaktnVDd3Sks2cG9pc3pzeWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQCLVXsMCoE AgACMCQDBwQqDsiEPoADBwQqDsiFAAADBwQqDsiGAAADBwQqDsiHAAAwDQYJKoZI hvcNAQELBQADggEBAGZ0pmGjOB/cixWfigLbKyuNxkoQLIenRe75UIUQzVf6sijw J/L8r4G10Q7bMbSllR99gQMla9TDLzMD9jC63QL790RizOXf6IdpdlR1gIoniGP6 OkLtC45ZgGQ5Cbhz79rRbF5iEkx0tu1KAtWz5zpPDhTct0epJSr/3aV1GbL5RAR3 Ox9PiLR0TDUAFd+IcnaWFK54yVSzkKCRKN0/smYUcOJZa3d3KOtkQzW5F4MinYst qu6ZDZoVELuErB7QQlDDoQVeGL1obktp6ClZuWql/7hKa2uLtTnOjQ+knFwJZWn1 hyUblSU6f5YzSkYDZlG3jKpxjXIvV95njuL4sGU= -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:18 2026 by rpki-client